diff --git a/linux-5.10/rk3568/arch/arm64_defconfig b/linux-5.10/rk3568/arch/arm64_defconfig
index cbaead80415a1652840a535d0388da3f7493b130..5db4e172154dbcdb323a944cd72c961ae1d2cb87 100644
--- a/linux-5.10/rk3568/arch/arm64_defconfig
+++ b/linux-5.10/rk3568/arch/arm64_defconfig
@@ -6103,3 +6103,9 @@ CONFIG_SECURITY_XPM_DEBUG=y
 #
 CONFIG_HIDE_MEM_ADDRESS=y
 # end hide excutable memory address of process manager
+
+#
+# container escape detection
+#
+CONFIG_SECURITY_CONTAINER_ESCAPE_DETECTION=y
+# end of container escape detection